Rate Limiting API requests although all should be disabled

[igorsLAB]

Answer these questions to help the Community help you with Security questions.

What is igorslab.de?

Have you searched for an answer?
Yes

Please share your search results url:

Troubleshooting Cloudflare Rate Limiting · Cloudflare Support docs

When you tested your domain using the Cloudflare Diagnostic Center, what were the results?

Describe the issue you are having:
Some internal requests are to the API (through the main domain) are rate limited.

What error message or number are you receiving?

What steps have you taken to resolve the issue?

1. Add Custom Rule to skip all WAF parts
2. Add Page Rule to Skip WAF
3. Custom Rate Limit rule with 1.000.000 req per 10s

Was the site working with SSL prior to adding it to Cloudflare?

What are the steps to reproduce the error:
Cron is rerunning every few minutes producing the errors.

Have you tried from another browser and/or incognito mode?
Not applicable

Please attach a screenshot of the error:

[cscharff]

Limits · Cloudflare Workers docs.

Accounts using the Workers Free plan are subject to a burst rate limit of 1,000 requests per minute. Users visiting a rate limited site will receive a Cloudflare 1015 error page. However if you are calling your Worker programmatically, you can detect the rate limit page and handle it yourself by looking for HTTP status code 429.

Workers being rate-limited by Anti-Abuse Protection are also visible from the Cloudflare dashboard. Log in to the Cloudflare dashboardOpen external link > select your site > Security > Events > scroll to Activity log and review the log for a Web Application Firewall Block event with a ruleID of worker.

[igorsLAB]

Hi,
Thanks a lot for the response and the insights. Workers are not in use.
A bare-metal server is running with a Wordpress instance. This Wordpress is using a public API on the same server connecting through it via the public available host and Cloudflare.
I am not sure why this is now affected by the workers at all.